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ABSTRACT 

A mathematical justification for AIME is developed, and 
it is compared with the mathematical justification for 
RAIM. It is seen that the mathematical bases for the two 
approaches is essentially the same. The test s* "*gfo for 
AIME is based on the residuals in the innovations 
processTof the Kaiman filter, rather than the _j£sidualg- 
Horn the instantaneous "snapshot" least s q uaresLSQl ntjon 
used in RAIM._T his is logical since the Kaiman filter 
residuaT is ~tfie~ difference between, measured Pseudo 
Range to each satellite and the predicted Pseudo Range 
from the estimated solution, which is the least sq uares 
solution based on all past measurements. 

Rather than the parity transformation used in RAIM, 
AIME transforms the residuals to the _principaL-axes— 
(eigenvectors) of the ellipsoid for the n dimensional 
normal distribution of the residuals. It is shown that any 
deterministic failure of a satellite leads to a non-central 
chi square distribution. This makes it possible to 
determine the exact probabilities for failure detection and 
exclusion on a single covariance run, which corresponds 
to an infinite number of Monte Carl runs. 



INTRODUCTION 

Autonomous Integrity Monitored Extrapolation (AIME) 
is a software mechanisation for integrating GPS with 
IRS to solve the GPS integrity/availability problem 
(References 1, 2). AIME can be used to achieve primary 
means of navigation for en-route, terminal area, and 
non-precision approach, without WAAS. 

Using Salman filter principles, AIME generates a least- 
squares solution based on the entire history of GPS 
measurements. There are 24 parameters es^™^ jg , 
each of the many parallel Kaiman filters used in AIME, 
m addition to four parameters estimated separately . 
These include all of the significant user clock bias states, 
baro error states, and inertia! error states. Also included 
are DC bias error states for each satellite. This means: 
that once the inte pitv ofLa new satellite is ftstahlishfs i, 
only change s-in-ihe DC bias over i^nuth ■vt^fliiifr 
interva ls needjemonitored to detect.s atellite failures . 

At the request of RTCA Special Committee 159, 
Working Group 3A (GPS/INS), a mathematical basis for 
die AIME failure detection and exclusion (FDE) 
algorithm was developed. It is comparable to that used 
for the RAIM FDE, as developed by R. Graver Brown 
in Reference 3. The mathematical basis for RAIM is first 
reviewed in this paper. The corresponding mathematical 
basis for AIME is then presented, with corresponding 
equation numbers so that they can be compared step by 
step. 

In RAIM, the instantaneous "snapshot" least squares 
residual vector is used to compute the test statistic. In 
AIME, the Kaiman filter innovations process residual 
vector is used to compute the test statistic, hi both cases, 
the test statistic is chi-square distributed, which is the 
basis for computing the failure detection and exclusion 
(FDE) probabilities. 



RAIMFDE 



where p is the magnitude of the parity vector. 



(This review is a summary of the methods described fay 
R. Grover Brown in Reference 3). 

1. RAIM uses n satellite measurements y (nxl) to obtain 
a least squares estimate of four parameters x (4x1)* 

The four estimated parameters x are the errors in the 
three position coordinates, and the aircraft receiver clock 
bias, which have been obtained from previous estimates. 
The measurements y are the differences between 
measured pseudoranges and predicted ones, based on the 
previous estimates. The linearized relationship between y 
andxis: * 

y - G x + 6 (BJL) 

where G (nx4) is a linear observation matrix, depending 
on satellite geometry* Its first three columns are the 
direction cosines to each of die satellites, and a column 
of ones corresponding to the receiver clock bias error. 
The measurement error e. (nxl) may have both random 
and deterministic parts. 

Assuming n > 4, the least squares estimate is obtained 
as: • * 

xls - (Wy (B2) 

2. RAIM determines integrity from the range residual 
vector w (nxl). 

The range residual vector is defined by first determining 
the measurement change yL5 (nxl) which results from 
the least squares fit solution: 

TLS m frx LS (R3) 

Th range residual vector w (nxl) is then the 
measurement difference: 

w^y-yLS^y-G-XLs (* 4 > 

3. Satellite failures are detected by using the mngpifnrift 
of the parity vector p (n-4)x(l) as the test statistic. 

The range residual vector is first transformed by the 
parity transformation P ((n-4)x(n)): 

p = P-w (R5) 

The sum-squared residuals are then given by: 

, p z = p A -p = w A -w (R6) 



If there are no satellite failures, it is assumed that the 
random part of the measurement error € is normally 
distributed with zero mean. The sum-squared residual p 
(lxl) is chi-square distributed with n-4 degrees of 
freedom (DOF). The threshold pp for detecting failures 
is selected from this distribution to result in the false 
alarm rate Pp^ — 10' /hour, assuming no satellite 
. failures. 

4. The effect of a deterministic range bias error b in the 
ith satellite is determined. 

The parity vector resulting from this range bias error is 
given by: 

dpj = Fbj (R7) 

where vector b\ (nxl) has a b in rowi, and zero elements 
elsewhere. The magnitude of this parity vector is 
denoted dpi. 

From Equation (R2) for the least squares solution, the 
effect of this same error b; on the solution is given by: 

<ki - (G T G) -1 G T -bi ■ (RB) 

The horizontal (radial) position error is obtained from 
the first two components, dxjj, and &X£2» of dbq. The 
horizontal error dRjis: 

dRi - (dx ix 2 + dx^ 2 ) 1 ' 2 . (R9) 

The linear relationship between the horizontal error and 
the test statistic is given by the characteristic slope: 

SLOPE(i) = dRi/dpi (RIO) 

In this relationship, the assumed magnitude b of the 
original range bias error has cancelled out. 
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5. The test statistic p resulting from both the random 
noise with zero mean and the deterministic bias error b is 
next considered. 

This statistic has a non-central chi square distribution. 
When the corresponding horizontal error exceeds a 
specified protection level HPL, it is desired that this 
statistic exceed the threshold pjj so that the satellite 
failure is detected. 

The critical bias p^ ias is defined as the deterministic 
value of the test statistic which exceeds th detection 
threshold by a sufficient margin that the probability 




p miss of not acceding the threshold is less than 0,001, 
when the random noise is added. The probability 
I is also called the probability of missed detection. 

6. The horizontal protection level (HPL) is determined. 

The satellite whose failure is most difficult to detect is 
the one with the smallest test statistic when the 
horizontal limit exceeds the protection level. This is the 
satellite with die maximum slope, SLOP E^t , as 
computed in Equation (RIO). The HPL is thai computed 
as: 

HPL = SLOPE^ -pbjas (Rll) 

The value of is determined from the non-central 
chi-square distribution with n-4 degrees of freedom. It is 
the non-centrality parameter which results in a 
probability less than P^gg of p being less than die 
detection threshold pp. 

7. If a fault is detected, using 3 above, the faulty satellite 
is excluded. 

This is done by selecting the jth subset of n-1 satellites 
with the smallest normalized test statistic. (Reference 4, 
Appendix K). However, for navigation to continue, the 
test statistic must be less than a 99.9% decision 
threshold. Also, the HPLj based on this threshold must 
be less than the horizontal alert limit (HAL) for that 
phase of flight 

Th reason the decision threshold can be temporarily 
i reduced to the 99.9% level is that the false alarm rate is 
j determined by the original fault detection threshold in 3 

above. Once a fault is detected, the probability of foiled 

exclusion is less than 0.001, using the reduced threshold, 

regardless of which satellite is faulty. 

AIMEFDE 

Both the step numbers and the equation numbers in the 
following correspond to the respective numbers for 
RAIM above. By comparing die two approaches, it can 
be seen that the mathematical justification for them is 
essentially the same. In both cases, the probabilitie s for 
detecti c^a^ jeentaTand 
the non-c entral chi square dist ributions^ 

1. AIME uses (nxt) satellite measurements z(t) (nxt) to 
obtain a least squares estimate of 24 parameters x (24x1) 

The 24 estimated parameters are the error states x(t) in a 
Kalman filter. The measurements z(t) are the differences, 
at 1 Hz., between die measured pseudoranges and 



predicted ones, based on the previous estimates. These 
measurements are pre- filtered by averaging over the 
Kalman filter cycle time (t^ - t^j) = 150 seconds (2.5 
minutes). The linearized relationship between the 
averaged measurements z and the residual errors x is: 

z(k) = H(k) • x(k) + v(k) (Al) 

where H(k) (nx24) is an averaged observation matrix. 
The averaged measurement error v(k) (nxl) may have 
both random and deterministic parts. 

For any number of satellites n > 0, the least squares 
estimate is obtained as: 

x+(k) = x~(k) +K(k)- 

[2(k).H(k)-x-(k)] (A2) 

where x"(k) is the previous least square estimate. 

2. AIME determines integrity from die residuals r(k) 
(nxl) in the Kalman filter innovations process. 

If x"(k) is the estimate of the error state before die 
updates at cycle k, the predicted measurement is 

z-(k) - H(k)-x-(fc) (A3) 

The Kalman filter residual (denoted Greek letter "mi" in 
the literature) is: 

r(k) = z(k)-z-(k) 

=:z(k)-H(k)-x-(k) (A4) 

The components of r(k) have an n dimensional normal 
distribution with zero mean and known covariance: 

E[r(k)] - 0 

E[r(k)-r T (k)] - V(k) 

where the covariance is: 

V(k) « H(k)-P'(k)-H T (k) + H(k) 

If there are no satellite failures and the Kalman filter 
model is correct, the residual vectors are independent for 
different k (the "innovations property", Reference 5). 
The innovations property can be expressed as: 

E[r<j)T T (k)] = 0, if j n.e. k 



3. Satellite failures are detected by using the magnitude 
of the normalized residual vector s (nxl) as the test 
statistic. 



Since the covariance matrix V is symmetric and positive 
definite, its eigenvectors lj (nxl) are orthognm l, aftf fa 
eigenvalues dj gj are positive (Reference 6). 
Denoting the modal matrix by L (nxn), and die diagonal 
matrix of eigenvalues by D (nxn), the residuals are 
transformed by: 



r « L>q 
q-D 172 s 



(AS) 



Hie test statistic is the normalized sum square of the 
normalized transformed residual s (nxl) In Appendix A 
it is shown that 



s 2 



T 

s**s 



(A6) 



If there are no satellite failures, it is shown in Appendix 
A that sr is chi square distributed with n degrees of 
. freedom (DOF). The threshold sq for detecting failures 
is selected to result in the raise alarm rate Pp^ = 10" 
/hour, assuming no satellite failures. 

The innovations property makes it possible to detect very 
slow satellite drifts. This is done by estimating the mean 
of the residuals over a long time interval, to determine 
the averaged residual. To avoid contaminating the 
Kalman filter, both the measurements and residuals are 
stored in buffers for periods of 30 minutes or more. 

Batch processing is used to determine the averages. 
Using the alternative form of the Kalman filter, the 
inverse covariance of the final estimate is obtained first: 



avg 



The estimate of the mean is then obtained as:. 



small, so that the statistic becomes large. This makes it 
possible to detect very slow satellite failures. 

4. The effect of a range bias error b in the ith satellite is 
determined. 

The transformed residual dsj (nxl) resulting from this 
range bias error is given by: 



dsj - jy m *L T bi 



(A7) 



where vector bj (nxl) has a b in row i, and zero elements 
elsewhere. The magnitude of this transformed residual 
vector is denoted dsj. 

From equation (A2), the effect of this same error on the 
solution is given by: 



&i + (k) = K(k)-bi 



(AS) 



Hie horizontal (radial) position error is obtained Scorn 
the first two components of cbq. The horizontal error is : 



dRi - (dxji 2 + dx^ 2 ) 172 



(A9) 



The linear relationship between die horizontal error and 
the test statistic is given by the characteristic slope: 



SLOPE(i) = diq/dsi 



(MO) 



The normalized sum-squared estimated mean residual is: 



avg 



As shown in Appendix A, this statistic has a central chi- 
square distribution if there is no failure.. As shown in 
Appendix 8, the distribution is non-central chi-square if 
there is a failure. By taking a long averaging interval, 
the covariance of the averaged residual becomes small. If 
there is a failure, the averaged residual does not become 



Jfajhi? ffgl ftt Sftqffhipj di e assume d flragniftv** ft of fhfk 
original range bias error h as canc elled out 

5. Hie test statistic s 2 resulting from both the random 
noise with zero mean and the deterministic bias error b is 
next considered. 

It is. shown in Appendix B that this statistic has a non- 
. central chi square distribution. The critical bias ds = 
Sbias tfefined as the deterministic value of the test 
statistic which exceeds the detection threshold by a 
sufficient margin that the probability P^ss °f * e tota * 
s y^staristic not exceeding the threshold is less than 0.001, 
when random noise is added. 

6. The horizontal protection level is^detennined. ' 

The satellite whose failure is most difficult to detect is 
the satellitte with maximum slope, SLOPE^^, as 
. computed in Equation (A10). The HPL is: 



HPL = SLOPE^-j^ 



(All). 




The value of s^ ias is determined from the non-central 
chi-square distribution to give a probability less than 
Pjjjjss of s being less than the detection threshold sq. 

7. If a fault is detected, using 3 above, the faulty satellite 
is excluded. 

This is done by running a bank of n test Kalman filters 
in parallel with the least squares Kalman filter. Each of 
these test Kalman filters excludes a different satellite and 
uses a subset of n-1 satellites. If a failure is detected bys 
the least squares filter, which uses all n satellites, the test / 
Kalman filter with die smallest test statistic g is assumed 
to exclude the bad satellite. 

For navigation to continue, this test statistic must be less 
than the 99.9% decision threshold. Also, the HPL: for 
this threshold must be less than the HAL for that phase 
of flight 

CONCLUSIONS 

Unlike RAJM, which only uses present measurements in 
a "snapshot" approach, AIME uses all present and past 
measurements to determine a least squares solution in a 
Kalman filter. This means that failure detection and 
exclusion does not require a minimum number of 
satellites in view. As a result, AIME can be used for 
primary navigation for all flight phases with a high 
availability. 

To isolate and exclude failures, AIME uses parallel 
Kalman filters, each of which excludes different 
satellites. An additional filter is used to exclude baro or 
inerfial failure modes ffif a failure is detected using all 
satellites in view, the failure is isoJat^Ja^comparing: 
averaged residuals from each of the p a rallel Kalman 
Jglters^ 
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APPENDIX A. WHY THE TRANSFORMED TEST 
STATISTIC IS CHI SQUARE DISTRIBUTED 

The modal transformation L transforms the residual 
vector r to a transformed residual q, whose components 
q j are uncorrected; 

r = L-q (AA1) 

The covariance matrix V is transformed to diagonal . 
form: 

D = L -1 VL (AA2) 

where 

djj = 0, if in.e. j, 

dii - q 2 (AA3) 

Since V is symmetic, the eigenvectors are orthogonal. 
The modal matrix L is Jhen an orthogonal 
transformation, so that L = L . This transformation 
rotates the axes to the eigenvectors, which are the 
principal axes of the ellipsoid representing die n 
dimensional normal distribution. 

The inverse V* is obtained from (AA2): 

D" 1 .- L^y^L - L T V^L V 

V^L-D^r^wV (AA4) 

The transformation Equation (AA1) and Equation (AA4) 
are then substituted into the definition of the transformed 
test statistic: 

s 2 = r T V l *r 



The substitution gives: 

s 2 - q T -L T L D" 1 -L T L q 
- q T J> A q 

Since the q[ are independent with variance ctj , the are 
independent, and are N(0,1). By definition, s is chi 
square distributed with n DOF. 

APPENDIX B. WHY THE TRANSFORMED 
STATISTIC WITH SATELLITE FAILURE IS NON- 
CENTRAL CHI SQUARE 

If there is a failure in satellite i, resulting in range bias, 
error bj, the corresponding residual is denoted dr = bj. 
More generally, dr could represent any satellite failure, 
such as a ramp. Also, the components of dr could be 
correlated if the failure extended over more than one 
Kalman filter cycle. 

Since the Kalman filter is a time-varying linear system, 
the total residual due to a failure is determined by 
superposition as: 

rj» =* r + dr 

where r is the residual with no satellite failure, and dr is 
the system response due to the failure alone. 

The total residual with the satellite failure included is 
transformed into the total test statistic by: 




/ s - D 4/2 L T -r 
/ ds = D- 1/2 -L T -dr 

i 

Since s has an n dimensional spherical normal 
distribution, the axes, can be rotated so that ds lies along 
one of the axes. This proves that 



2 T 

has a non-central chi square distribution with non- 
centrality parameter ds . 



